General

  • Target

    3fad61286f2f5d474d6cfc8d47ddf420N.exe

  • Size

    2.0MB

  • MD5

    3fad61286f2f5d474d6cfc8d47ddf420

  • SHA1

    d9e985c962326133812eb1ca7ec25c999971297d

  • SHA256

    7bb95b49bf2d76cefb4225f0ed2ef996660c7b7784f293bfb341e36ee227ff46

  • SHA512

    d649cc6d87cb2dcd6900684c8c85d281b4164d0daffe4b1b3f5a122f0e709df8f0b59a2a7fc1f004943d9a37ecea0dbb74bd30be9f35a154773dfa9dc41f4f40

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5sf6r+WVc2HhG82g1Vr5s1PTRub:NABU

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 3fad61286f2f5d474d6cfc8d47ddf420N.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections